Remote GRC Analyst – Risk & Compliance Leader

RxBenefits, Inc.; Indianapolis (IN); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

401(k) match

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit

EAP via Spring Health

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives within the security and compliance teams. Strong program management and attention to detail are essential to multi-task across initiatives.

The role includes managing risk assessments, audits, controls documentation, and executive-level reporting to support RxBenefits’ compliance vision and ongoing governance.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.
• 5+ years of experience with IT general controls and other IT controls aligned with frameworks such as NIST, ISO, and COBIT.
• Healthcare industry experience preferred.
• Experience working with external audit firms preferred.

Responsibilities

• Coordinate with RxBenefits teams to identify assets and threats and support risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk and mature controls.
• Perform routine or ad-hoc security risk assessments as needed or on management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and related details.
• Produce periodic risk views/reports to inform executives of the program health and risk position.
• Prepare for and assist with internal and external audits.
• Evaluate impact of control deficiencies in audits and drive business impact.
• Work with RxBenefits Clients to respond to security questionnaires and audit report requests.
• Exercise judgment and critical thinking to influence business partners.
• Balance business strategy with risk management controls.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit experience

Risk management

Compliance program

Communication skills

Detail oriented

Education

Bachelor’s degree or equivalent experience

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives within the security and compliance teams. Strong program management and attention to detail are essential to multi-task across initiatives.

The role includes managing risk assessments, audits, controls documentation, and executive-level reporting to support RxBenefits’ compliance vision and ongoing governance.